CVE-2024-11170

Name of the Vulnerable Software and Affected Versions danny-avila/librechat versions prior to 0.7.6

Description The issue is caused by improper sanitization of file paths by the multer middleware, leading to path traversal. This can result in arbitrary file write and potentially remote code execution.

Recommendations For versions prior to 0.7.6, update to version 0.7.6 to resolve the issue. As a temporary workaround, consider restricting access to the multer middleware to minimize the risk of exploitation.